Merge pull request #221 from thelounge/astorije/quickfix-query

Disallow /query on non-nicks
2016-03-27 01:27:47 +02:00 · 2016-03-27 01:27:47 +02:00 · 1ab136d897
commit 1ab136d897
parent 7ee7dc79f0 fefc6c5132
1 changed files with 5 additions and 0 deletions
--- a/src/plugins/inputs/query.js
+++ b/src/plugins/inputs/query.js
@ -14,6 +14,11 @@ exports.input = function(network, chan, cmd, args) {
 		return;
 	}

+	// If target doesn't start with an allowed character, ignore
+	if (!/^[a-zA-Z_\\\[\]{}^`|]/.test(target)) {
+		return;
+	}
+
 	var newChan = new Chan({
 		type: Chan.Type.QUERY,
 		name: target